eslint-plugin-sonarjs 1.0.4 → 2.0.0

package/lib/S5264/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5264/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAG/D,wHAAgG;AAChG,oGAA4E;AAG5E,wCAA0C;AAC1C,4DAAoC;AAEvB,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE;YACR,UAAU,EAAE,mDAAmD;SAChE;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAC;QAE5C,SAAS,kBAAkB,CAAC,QAA6B;YACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAwB,EAAE,EAAE;gBAChD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,SAAS;wBACZ,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC9B,KAAK,aAAa;wBAChB,OAAO,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC5C,KAAK,YAAY;wBACf,OAAO,CAAC,IAAA,kCAAwB,EAC9B,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,EACjC,KAAK,CAAC,cAAc,CAAC,UAAU,CAChC,CAAC;oBACJ,KAAK,wBAAwB;wBAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;4BAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,CAAC;wBAC/C,CAAC;wBACD,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,oBAAoB,CAAC;oBAExD;wBACE,OAAO,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,CAAC,IAAiB;gBAC1B,MAAM,OAAO,GAAG,IAAsC,CAAC;gBACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACjD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpC,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI;wBACJ,SAAS,EAAE,YAAY;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/lib/S5332/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S5332/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S5332/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S5332/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S5332/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Using clear-text protocols is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S5332/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S5332/rule.aws.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5332/rule.aws.js

@@ -0,0 +1,136 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5332/javascript
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const cdk_1 = require("../helpers/aws/cdk");
+const sensitivePorts = [80, 8080, 8000, 8008];
+exports.rule = (0, cdk_1.AwsCdkTemplate)({
+    'aws-cdk-lib.aws_elasticache.CfnReplicationGroup': (0, cdk_1.AwsCdkCheckArguments)('replicationGroup', true, 'transitEncryptionEnabled', { primitives: { invalid: [false] } }),
+    'aws-cdk-lib.aws_kinesis.Stream': (0, cdk_1.AwsCdkCheckArguments)('streamEncryptionDisabled', false, 'encryption', { fqns: { invalid: ['aws_cdk_lib.aws_kinesis.StreamEncryption.UNENCRYPTED'] } }),
+    'aws-cdk-lib.aws_kinesis.CfnStream': (0, cdk_1.AwsCdkCheckArguments)('streamEncryptionDisabled', true, 'streamEncryption'),
+    'aws-cdk-lib.aws_elasticloadbalancing.LoadBalancer': {
+        callExpression: (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'externalProtocol', {
+            fqns: {
+                invalid: [
+                    'aws-cdk-lib.aws_elasticloadbalancing.LoadBalancingProtocol.TCP',
+                    'aws-cdk-lib.aws_elasticloadbalancing.LoadBalancingProtocol.HTTP',
+                ],
+            },
+        }, false, 0),
+        functionName: 'addListener',
+        newExpression: (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, ['listeners', 'externalProtocol'], {
+            fqns: {
+                invalid: [
+                    'aws-cdk-lib.aws_elasticloadbalancing.LoadBalancingProtocol.TCP',
+                    'aws-cdk-lib.aws_elasticloadbalancing.LoadBalancingProtocol.HTTP',
+                ],
+            },
+        }),
+    },
+    'aws-cdk-lib.aws_elasticloadbalancing.CfnLoadBalancer': (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, ['listeners', 'protocol'], { primitives: { invalid: ['tcp', 'http'], case_insensitive: true } }),
+    'aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer': {
+        callExpression: httpOrSensitivePort(1),
+        functionName: 'addListener',
+    },
+    'aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationListener': httpOrSensitivePort(2),
+    'aws-cdk-lib.aws_elasticloadbalancingv2.NetworkLoadBalancer': {
+        callExpression: (expr, ctx) => {
+            const httpProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'protocol', {
+                fqns: {
+                    invalid: [
+                        'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.HTTP',
+                        'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.TCP',
+                        'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.UDP',
+                        'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.TCP_UDP',
+                    ],
+                },
+            }, true, 1);
+            const node = httpProtocol(expr, ctx);
+            if (node) {
+                ctx.report({ messageId: 'noSSLTLS', node });
+            }
+            else {
+                const missingProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', true, 'protocol', undefined, true, 1);
+                if (missingProtocol(expr, ctx)) {
+                    const certificatesChecker = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', true, 'certificates', undefined, true, 1);
+                    const portNode = certificatesChecker(expr, ctx);
+                    if (portNode) {
+                        ctx.report({ messageId: 'noSSLTLS', node: portNode });
+                    }
+                }
+            }
+        },
+        functionName: 'addListener',
+    },
+    'aws-cdk-lib.aws_elasticloadbalancingv2.NetworkListener': (expr, ctx) => {
+        const httpProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'protocol', {
+            fqns: {
+                invalid: [
+                    'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.TCP',
+                    'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.UDP',
+                    'aws-cdk-lib.aws_elasticloadbalancingv2.Protocol.TCP_UDP',
+                ],
+            },
+        }, true);
+        const node = httpProtocol(expr, ctx);
+        if (node) {
+            ctx.report({ messageId: 'noSSLTLS', node });
+        }
+        else {
+            const missingProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', true, 'protocol', undefined, true);
+            if (missingProtocol(expr, ctx)) {
+                const certificatesChecker = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', true, 'certificates', undefined, true);
+                const portNode = certificatesChecker(expr, ctx);
+                if (portNode) {
+                    ctx.report({ messageId: 'noSSLTLS', node: portNode });
+                }
+            }
+        }
+    },
+    'aws-cdk-lib.aws_elasticloadbalancingv2.CfnListener': (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'protocol', { primitives: { invalid: ['HTTP', 'TCP', 'UDP', 'TCP_UDP'], case_insensitive: true } }),
+}, {
+    messages: {
+        replicationGroup: 'Make sure that disabling transit encryption is safe here.',
+        noSSLTLS: 'Make sure that using network protocols without an SSL/TLS underlay is safe here.',
+        streamEncryptionDisabled: 'Make sure that disabling stream encryption is safe here.',
+    },
+});
+function httpOrSensitivePort(position) {
+    return function (expr, ctx) {
+        const httpProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'protocol', { fqns: { invalid: ['aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationProtocol.HTTP'] } }, true, position);
+        const node = httpProtocol(expr, ctx);
+        if (node) {
+            ctx.report({ messageId: 'noSSLTLS', node });
+        }
+        else {
+            const missingProtocol = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', true, 'protocol', undefined, true, position);
+            if (missingProtocol(expr, ctx)) {
+                const portChecker = (0, cdk_1.AwsCdkCheckArguments)('noSSLTLS', false, 'port', { primitives: { invalid: sensitivePorts } }, true, position);
+                const portNode = portChecker(expr, ctx);
+                if (portNode) {
+                    ctx.report({ messageId: 'noSSLTLS', node: portNode });
+                }
+            }
+        }
+    };
+}
+//# sourceMappingURL=rule.aws.js.map

package/lib/S5332/rule.aws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.aws.js","sourceRoot":"","sources":["../../S5332/rule.aws.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;AAG/D,4CAA0E;AAG1E,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEjC,QAAA,IAAI,GAAoB,IAAA,oBAAc,EACjD;IACE,iDAAiD,EAAE,IAAA,0BAAoB,EACrE,kBAAkB,EAClB,IAAI,EACJ,0BAA0B,EAC1B,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACrC;IACD,gCAAgC,EAAE,IAAA,0BAAoB,EACpD,0BAA0B,EAC1B,KAAK,EACL,YAAY,EACZ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,sDAAsD,CAAC,EAAE,EAAE,CAChF;IACD,mCAAmC,EAAE,IAAA,0BAAoB,EACvD,0BAA0B,EAC1B,IAAI,EACJ,kBAAkB,CACnB;IACD,mDAAmD,EAAE;QACnD,cAAc,EAAE,IAAA,0BAAoB,EAClC,UAAU,EACV,KAAK,EACL,kBAAkB,EAClB;YACE,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,gEAAgE;oBAChE,iEAAiE;iBAClE;aACF;SACF,EACD,KAAK,EACL,CAAC,CACF;QACD,YAAY,EAAE,aAAa;QAC3B,aAAa,EAAE,IAAA,0BAAoB,EAAC,UAAU,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;YACxF,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,gEAAgE;oBAChE,iEAAiE;iBAClE;aACF;SACF,CAAC;KACH;IACD,sDAAsD,EAAE,IAAA,0BAAoB,EAC1E,UAAU,EACV,KAAK,EACL,CAAC,WAAW,EAAE,UAAU,CAAC,EACzB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CACrE;IACD,gEAAgE,EAAE;QAChE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACtC,YAAY,EAAE,aAAa;KAC5B;IACD,4DAA4D,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACpF,4DAA4D,EAAE;QAC5D,cAAc,EAAE,CAAC,IAA0B,EAAE,GAAqB,EAAE,EAAE;YACpE,MAAM,YAAY,GAAG,IAAA,0BAAoB,EACvC,UAAU,EACV,KAAK,EACL,UAAU,EACV;gBACE,IAAI,EAAE;oBACJ,OAAO,EAAE;wBACP,sDAAsD;wBACtD,qDAAqD;wBACrD,qDAAqD;wBACrD,yDAAyD;qBAC1D;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;YACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,eAAe,GAAG,IAAA,0BAAoB,EAC1C,UAAU,EACV,IAAI,EACJ,UAAU,EACV,SAAS,EACT,IAAI,EACJ,CAAC,CACF,CAAC;gBACF,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC/B,MAAM,mBAAmB,GAAG,IAAA,0BAAoB,EAC9C,UAAU,EACV,IAAI,EACJ,cAAc,EACd,SAAS,EACT,IAAI,EACJ,CAAC,CACF,CAAC;oBACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBAChD,IAAI,QAAQ,EAAE,CAAC;wBACb,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,YAAY,EAAE,aAAa;KAC5B;IACD,wDAAwD,EAAE,CACxD,IAA0B,EAC1B,GAAqB,EACrB,EAAE;QACF,MAAM,YAAY,GAAG,IAAA,0BAAoB,EACvC,UAAU,EACV,KAAK,EACL,UAAU,EACV;YACE,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,qDAAqD;oBACrD,qDAAqD;oBACrD,yDAAyD;iBAC1D;aACF;SACF,EACD,IAAI,CACL,CAAC;QACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,IAAA,0BAAoB,EAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5F,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,mBAAmB,GAAG,IAAA,0BAAoB,EAC9C,UAAU,EACV,IAAI,EACJ,cAAc,EACd,SAAS,EACT,IAAI,CACL,CAAC;gBACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,oDAAoD,EAAE,IAAA,0BAAoB,EACxE,UAAU,EACV,KAAK,EACL,UAAU,EACV,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CACvF;CACF,EACD;IACE,QAAQ,EAAE;QACR,gBAAgB,EAAE,2DAA2D;QAC7E,QAAQ,EAAE,kFAAkF;QAC5F,wBAAwB,EAAE,0DAA0D;KACrF;CACF,CACF,CAAC;AAEF,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,UAAU,IAA0B,EAAE,GAAqB;QAChE,MAAM,YAAY,GAAG,IAAA,0BAAoB,EACvC,UAAU,EACV,KAAK,EACL,UAAU,EACV,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,iEAAiE,CAAC,EAAE,EAAE,EAC1F,IAAI,EACJ,QAAQ,CACT,CAAC;QACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,IAAA,0BAAoB,EAC1C,UAAU,EACV,IAAI,EACJ,UAAU,EACV,SAAS,EACT,IAAI,EACJ,QAAQ,CACT,CAAC;YACF,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,IAAA,0BAAoB,EACtC,UAAU,EACV,KAAK,EACL,MAAM,EACN,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAC3C,IAAI,EACJ,QAAQ,CACT,CAAC;gBACF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/lib/S5332/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5332/rule.js

@@ -0,0 +1,39 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5332/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const rule_lib_1 = require("./rule.lib");
+const rule_aws_1 = require("./rule.aws");
+const meta_json_1 = __importDefault(require("./meta.json"));
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        messages: { ...rule_lib_1.rule.meta.messages, ...rule_aws_1.rule.meta.messages },
+    }),
+    create(context) {
+        return (0, helpers_1.mergeRules)(rule_lib_1.rule.create(context), rule_aws_1.rule.create(context));
+    },
+};
+//# sourceMappingURL=rule.js.map

package/lib/S5332/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5332/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAG/D,wCAAsD;AACtD,yCAA0D;AAC1D,yCAA6C;AAC7C,4DAAoC;AAEvB,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE,EAAE,GAAG,eAAoB,CAAC,IAAK,CAAC,QAAQ,EAAE,GAAG,eAAO,CAAC,IAAK,CAAC,QAAQ,EAAE;KAChF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,OAAO,IAAA,oBAAU,EAAC,eAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,eAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,CAAC;CACF,CAAC"}

package/lib/S5332/rule.lib.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5332/rule.lib.js

@@ -0,0 +1,205 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5332/javascript
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const url_1 = require("url");
+const helpers_1 = require("../helpers");
+const cdk_1 = require("../helpers/aws/cdk");
+const INSECURE_PROTOCOLS = ['http://', 'ftp://', 'telnet://'];
+const LOOPBACK_PATTERN = /localhost|127(?:\.\d+){0,2}\.\d+$|\/\/(?:0*:)*?:?0*1$/;
+const EXCEPTION_FULL_HOSTS = [
+    'www.w3.org',
+    'xml.apache.org',
+    'schemas.xmlsoap.org',
+    'schemas.openxmlformats.org',
+    'rdfs.org',
+    'purl.org',
+    'xmlns.com',
+    'schemas.google.com',
+    'a9.com',
+    'ns.adobe.com',
+    'ltsc.ieee.org',
+    'docbook.org',
+    'graphml.graphdrawing.org',
+    'json-schema.org',
+];
+const EXCEPTION_TOP_HOSTS = [
+    /\.example$/,
+    /\.?example\.com$/,
+    /\.?example\.org$/,
+    /\.test$/,
+    /\.?test\.com$/,
+];
+exports.rule = {
+    meta: {
+        messages: {
+            insecureProtocol: 'Using {{protocol}} protocol is insecure. Use {{alternative}} instead.',
+        },
+    },
+    create(context) {
+        function checkNodemailer(callExpression) {
+            const firstArg = callExpression.arguments.length > 0 ? callExpression.arguments[0] : null;
+            if (!firstArg) {
+                return;
+            }
+            const firstArgValue = (0, helpers_1.getValueOfExpression)(context, firstArg, 'ObjectExpression');
+            const ses = (0, helpers_1.getProperty)(firstArgValue, 'SES', context);
+            if (ses && usesSesCommunication(ses)) {
+                return;
+            }
+            const secure = (0, helpers_1.getProperty)(firstArgValue, 'secure', context);
+            if (secure && (secure.value.type !== 'Literal' || secure.value.raw !== 'false')) {
+                return;
+            }
+            const requireTls = (0, helpers_1.getProperty)(firstArgValue, 'requireTLS', context);
+            if (requireTls && (requireTls.value.type !== 'Literal' || requireTls.value.raw !== 'false')) {
+                return;
+            }
+            const port = (0, helpers_1.getProperty)(firstArgValue, 'port', context);
+            if (port && (port.value.type !== 'Literal' || port.value.raw === '465')) {
+                return;
+            }
+            context.report({ node: callExpression.callee, ...getMessageAndData('http') });
+        }
+        function usesSesCommunication(sesProperty) {
+            const configuration = (0, helpers_1.getValueOfExpression)(context, sesProperty.value, 'ObjectExpression');
+            if (!configuration) {
+                return false;
+            }
+            const ses = (0, helpers_1.getValueOfExpression)(context, (0, helpers_1.getProperty)(configuration, 'ses', context)?.value, 'NewExpression');
+            if (!ses || (0, cdk_1.normalizeFQN)((0, helpers_1.getFullyQualifiedName)(context, ses)) !== '@aws_sdk.client_ses.SES') {
+                return false;
+            }
+            const aws = (0, helpers_1.getProperty)(configuration, 'aws', context);
+            if (!aws ||
+                (0, cdk_1.normalizeFQN)((0, helpers_1.getFullyQualifiedName)(context, aws.value)) !== '@aws_sdk.client_ses') {
+                return false;
+            }
+            return true;
+        }
+        function checkCallToFtp(callExpression) {
+            if (callExpression.callee.type === 'MemberExpression' &&
+                callExpression.callee.property.type === 'Identifier' &&
+                callExpression.callee.property.name === 'connect') {
+                const newExpression = (0, helpers_1.getValueOfExpression)(context, callExpression.callee.object, 'NewExpression');
+                if (!!newExpression && (0, helpers_1.getFullyQualifiedName)(context, newExpression.callee) === 'ftp') {
+                    const firstArg = callExpression.arguments.length > 0 ? callExpression.arguments[0] : null;
+                    if (!firstArg) {
+                        return;
+                    }
+                    const firstArgValue = (0, helpers_1.getValueOfExpression)(context, firstArg, 'ObjectExpression');
+                    const secure = (0, helpers_1.getProperty)(firstArgValue, 'secure', context);
+                    if (secure && secure.value.type === 'Literal' && secure.value.raw === 'false') {
+                        context.report({
+                            node: callExpression.callee,
+                            ...getMessageAndData('ftp'),
+                        });
+                    }
+                }
+            }
+        }
+        function checkCallToRequire(callExpression) {
+            if (callExpression.callee.type === 'Identifier' && callExpression.callee.name === 'require') {
+                const firstArg = callExpression.arguments.length > 0 ? callExpression.arguments[0] : null;
+                if (firstArg &&
+                    firstArg.type === 'Literal' &&
+                    typeof firstArg.value === 'string' &&
+                    firstArg.value === 'telnet-client') {
+                    context.report({
+                        node: firstArg,
+                        ...getMessageAndData('telnet'),
+                    });
+                }
+            }
+        }
+        function isExceptionUrl(value, node) {
+            if (INSECURE_PROTOCOLS.includes(value)) {
+                const parent = (0, helpers_1.getParent)(context, node);
+                return !(parent?.type === 'BinaryExpression' && parent.operator === '+');
+            }
+            return hasExceptionHost(value);
+        }
+        function hasExceptionHost(value) {
+            let url;
+            try {
+                url = new url_1.URL(value);
+            }
+            catch (err) {
+                return false;
+            }
+            const host = url.hostname;
+            return (host.length === 0 ||
+                LOOPBACK_PATTERN.test(host) ||
+                EXCEPTION_FULL_HOSTS.some(exception => exception === host) ||
+                EXCEPTION_TOP_HOSTS.some(exception => exception.test(host)));
+        }
+        return {
+            Literal: (node) => {
+                const literal = node;
+                if (typeof literal.value === 'string') {
+                    const value = literal.value.trim().toLocaleLowerCase();
+                    const insecure = INSECURE_PROTOCOLS.find(protocol => value.startsWith(protocol));
+                    if (insecure && !isExceptionUrl(value, node)) {
+                        const protocol = insecure.substring(0, insecure.indexOf(':'));
+                        context.report({
+                            ...getMessageAndData(protocol),
+                            node,
+                        });
+                    }
+                }
+            },
+            CallExpression: (node) => {
+                const callExpression = node;
+                if ((0, helpers_1.getFullyQualifiedName)(context, callExpression) === 'nodemailer.createTransport') {
+                    checkNodemailer(callExpression);
+                }
+                checkCallToFtp(callExpression);
+                checkCallToRequire(callExpression);
+            },
+            ImportDeclaration: (node) => {
+                const importDeclaration = node;
+                if (typeof importDeclaration.source.value === 'string' &&
+                    importDeclaration.source.value === 'telnet-client') {
+                    context.report({
+                        node: importDeclaration.source,
+                        ...getMessageAndData('telnet'),
+                    });
+                }
+            },
+        };
+    },
+};
+function getMessageAndData(protocol) {
+    let alternative;
+    switch (protocol) {
+        case 'http':
+            alternative = 'https';
+            break;
+        case 'ftp':
+            alternative = 'sftp, scp or ftps';
+            break;
+        default:
+            alternative = 'ssh';
+    }
+    return { messageId: 'insecureProtocol', data: { protocol, alternative } };
+}
+//# sourceMappingURL=rule.lib.js.map

package/lib/S5332/rule.lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.lib.js","sourceRoot":"","sources":["../../S5332/rule.lib.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;AAI/D,6BAA0B;AAC1B,wCAAiG;AACjG,4CAAkD;AAElD,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AACjF,MAAM,oBAAoB,GAAG;IAC3B,YAAY;IACZ,gBAAgB;IAChB,qBAAqB;IACrB,4BAA4B;IAC5B,UAAU;IACV,UAAU;IACV,WAAW;IACX,oBAAoB;IACpB,QAAQ;IACR,cAAc;IACd,eAAe;IACf,aAAa;IACb,0BAA0B;IAC1B,iBAAiB;CAClB,CAAC;AACF,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,kBAAkB;IAClB,kBAAkB;IAClB,SAAS;IACT,eAAe;CAChB,CAAC;AAEW,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE;QACJ,QAAQ,EAAE;YACR,gBAAgB,EAAE,uEAAuE;SAC1F;KACF;IACD,MAAM,CAAC,OAAyB;QAC9B,SAAS,eAAe,CAAC,cAAqC;YAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAElF,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACrE,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;gBAC5F,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,EAAE,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,SAAS,oBAAoB,CAAC,WAA4B;YACxD,MAAM,aAAa,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC3F,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,GAAG,GAAG,IAAA,8BAAoB,EAC9B,OAAO,EACP,IAAA,qBAAW,EAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,EACjD,eAAe,CAChB,CAAC;YACF,IAAI,CAAC,GAAG,IAAI,IAAA,kBAAY,EAAC,IAAA,+BAAqB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,yBAAyB,EAAE,CAAC;gBAC5F,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACvD,IACE,CAAC,GAAG;gBACJ,IAAA,kBAAY,EAAC,IAAA,+BAAqB,EAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,qBAAqB,EACjF,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS,cAAc,CAAC,cAAqC;YAC3D,IACE,cAAc,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;gBACjD,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBACpD,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EACjD,CAAC;gBACD,MAAM,aAAa,GAAG,IAAA,8BAAoB,EACxC,OAAO,EACP,cAAc,CAAC,MAAM,CAAC,MAAM,EAC5B,eAAe,CAChB,CAAC;gBACF,IAAI,CAAC,CAAC,aAAa,IAAI,IAAA,+BAAqB,EAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;oBACtF,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,MAAM,aAAa,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;oBAClF,MAAM,MAAM,GAAG,IAAA,qBAAW,EAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAC7D,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;wBAC9E,OAAO,CAAC,MAAM,CAAC;4BACb,IAAI,EAAE,cAAc,CAAC,MAAM;4BAC3B,GAAG,iBAAiB,CAAC,KAAK,CAAC;yBAC5B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,SAAS,kBAAkB,CAAC,cAAqC;YAC/D,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5F,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1F,IACE,QAAQ;oBACR,QAAQ,CAAC,IAAI,KAAK,SAAS;oBAC3B,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;oBAClC,QAAQ,CAAC,KAAK,KAAK,eAAe,EAClC,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI,EAAE,QAAQ;wBACd,GAAG,iBAAiB,CAAC,QAAQ,CAAC;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAiB;YACtD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,SAAS,gBAAgB,CAAC,KAAa;YACrC,IAAI,GAAG,CAAC;YAER,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,SAAG,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC1B,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3B,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;gBAC1D,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC7B,MAAM,OAAO,GAAG,IAAsB,CAAC;gBACvC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;oBACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACjF,IAAI,QAAQ,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;wBAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC9D,OAAO,CAAC,MAAM,CAAC;4BACb,GAAG,iBAAiB,CAAC,QAAQ,CAAC;4BAC9B,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,cAAc,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACpC,MAAM,cAAc,GAAG,IAA6B,CAAC;gBACrD,IAAI,IAAA,+BAAqB,EAAC,OAAO,EAAE,cAAc,CAAC,KAAK,4BAA4B,EAAE,CAAC;oBACpF,eAAe,CAAC,cAAc,CAAC,CAAC;gBAClC,CAAC;gBACD,cAAc,CAAC,cAAc,CAAC,CAAC;gBAC/B,kBAAkB,CAAC,cAAc,CAAC,CAAC;YACrC,CAAC;YACD,iBAAiB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACvC,MAAM,iBAAiB,GAAG,IAAgC,CAAC;gBAC3D,IACE,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;oBAClD,iBAAiB,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,EAClD,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,GAAG,iBAAiB,CAAC,QAAQ,CAAC;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,WAAW,CAAC;IAChB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,WAAW,GAAG,OAAO,CAAC;YACtB,MAAM;QACR,KAAK,KAAK;YACR,WAAW,GAAG,mBAAmB,CAAC;YAClC,MAAM;QACR;YACE,WAAW,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;AAC5E,CAAC"}

package/lib/S5443/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S5443/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S5443/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S5443/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}

package/lib/S5443/meta.json

@@ -0,0 +1,9 @@
+{
+    "type": "problem",
+    "docs": {
+        "description": "Using publicly writable directories is security-sensitive",
+        "recommended": true,
+        "url": "https://sonarsource.github.io/rspec/#/rspec/S5443/javascript",
+        "requiresTypeChecking": false
+    }
+}

package/lib/S5443/rule.d.ts

@@ -0,0 +1,2 @@
+import { Rule } from 'eslint';
+export declare const rule: Rule.RuleModule;

package/lib/S5443/rule.js

@@ -0,0 +1,82 @@
+"use strict";
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+// https://sonarsource.github.io/rspec/#/rspec/S5443/javascript
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+const helpers_1 = require("../helpers");
+const meta_json_1 = __importDefault(require("./meta.json"));
+const UNIX_DIRECTORIES = [
+    '/tmp/',
+    '/var/tmp/',
+    '/usr/tmp/',
+    '/dev/shm/',
+    '/dev/mqueue/',
+    '/run/lock/',
+    '/var/run/lock/',
+    '/library/caches/',
+    '/users/shared/',
+    '/private/tmp/',
+    '/private/var/tmp/',
+].map(v => new RegExp(`^${v}`, 'i'));
+const WINDOWS_DIRECTORIES_PATTERN = new RegExp('^[^\\\\]*(\\\\){1,2}(Windows(\\\\){1,2}Temp|Temp|TMP)(\\\\.*|$)', 'i');
+const SENSITIVE_ENV_VARIABLES = ['TMPDIR', 'TMP', 'TEMPDIR', 'TEMP'];
+exports.rule = {
+    meta: (0, helpers_1.generateMeta)(meta_json_1.default, {
+        messages: {
+            safeDirectory: 'Make sure publicly writable directories are used safely here.',
+        },
+    }),
+    create(context) {
+        return {
+            Literal: (node) => {
+                const literal = node;
+                // Using literal.raw instead of literal.value as the latter escapes backslashes
+                const value = literal.raw?.slice(1, literal.raw.length - 1);
+                if (value &&
+                    (UNIX_DIRECTORIES.find(i => value.match(i)) || value.match(WINDOWS_DIRECTORIES_PATTERN))) {
+                    context.report({
+                        node: literal,
+                        messageId: 'safeDirectory',
+                    });
+                }
+            },
+            MemberExpression: (node) => {
+                const memberExpression = node;
+                const { object, property } = memberExpression;
+                if (property.type !== 'Identifier' ||
+                    !SENSITIVE_ENV_VARIABLES.includes(property.name) ||
+                    object.type !== 'MemberExpression') {
+                    return;
+                }
+                if (object.property.type === 'Identifier' &&
+                    object.property.name === 'env' &&
+                    object.object.type === 'Identifier' &&
+                    object.object.name === 'process') {
+                    context.report({ node: memberExpression, messageId: 'safeDirectory' });
+                }
+            },
+        };
+    },
+};
+//# sourceMappingURL=rule.js.map

package/lib/S5443/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../S5443/rule.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAA+D;;;;;;AAI/D,wCAA0C;AAC1C,4DAAoC;AAEpC,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,WAAW;IACX,WAAW;IACX,WAAW;IACX,cAAc;IACd,YAAY;IACZ,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,mBAAmB;CACpB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;AAErC,MAAM,2BAA2B,GAAG,IAAI,MAAM,CAC5C,iEAAiE,EACjE,GAAG,CACJ,CAAC;AACF,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAExD,QAAA,IAAI,GAAoB;IACnC,IAAI,EAAE,IAAA,sBAAY,EAAC,mBAA8B,EAAE;QACjD,QAAQ,EAAE;YACR,aAAa,EAAE,+DAA+D;SAC/E;KACF,CAAC;IACF,MAAM,CAAC,OAAyB;QAC9B,OAAO;YACL,OAAO,EAAE,CAAC,IAAiB,EAAE,EAAE;gBAC7B,MAAM,OAAO,GAAG,IAAsB,CAAC;gBACvC,+EAA+E;gBAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5D,IACE,KAAK;oBACL,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,EACxF,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI,EAAE,OAAO;wBACb,SAAS,EAAE,eAAe;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,gBAAgB,EAAE,CAAC,IAAiB,EAAE,EAAE;gBACtC,MAAM,gBAAgB,GAAG,IAA+B,CAAC;gBACzD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC;gBAC9C,IACE,QAAQ,CAAC,IAAI,KAAK,YAAY;oBAC9B,CAAC,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAChD,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAClC,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IACE,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK;oBAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;oBACnC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAChC,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/lib/S5527/index.d.ts

@@ -0,0 +1 @@
+export { rule } from './rule';

package/lib/S5527/index.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rule = void 0;
+/*
+ * SonarQube JavaScript Plugin
+ * Copyright (C) 2011-2024 SonarSource SA
+ * mailto:info AT sonarsource DOT com
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ */
+var rule_1 = require("./rule");
+Object.defineProperty(exports, "rule", { enumerable: true, get: function () { return rule_1.rule; } });
+//# sourceMappingURL=index.js.map

package/lib/S5527/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../S5527/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,+BAA8B;AAArB,4FAAA,IAAI,OAAA"}